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Claims 

What is claimed is: 

1 . A method for performing a computational task associated with a cryptographic protocol 
in a distributed manner using a plurahty of machines, the plurality of machines comprising an 

5 originator machine and at least one additional machine, the method comprising the steps of: 

transforming a computational task involving a given input in the originator machine, 

the transforming of the computational task involving at least an error-related operation, a blinding 

operation and a permutation operation; 

sending the transformed computational task to the at least one additional machine for 

10 execution; 

receiving one or more results of the transformed computational task in the originator 

machine; and 

transforming the one or more results of the transformed computational task in the 
originator machine in a manner which permits verification that the one or more results are 
1 5 appropriate resuhs for the given input. 

2. The method of claim 1 wherein the operation associated with the cryptographic protocol 
comprises an exponentiation operation. 

20 3. The method of claim 1 wherein the cryptographic protocol comprises a digital signature 

protocol. 

4. The method of claim 1 wherein at least a subset of the originator machine and the at least 
one additional machine each comprise one or more servers associated with a computer network. 

25 

5. The method of claim 1 wherein the originator machine and the at least one additional 
machine communicate over a network. 
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6. The method of claim 1 wherein the originator machine includes a card reader configured 
to read information relating to the cryptographic protocol from a smart card. 

7. The method of claim 1 wherein the blinding operation is applied to an output of the error- 
5 related operation, and the permutation operation is applied to an output of the blinding operation. 

8. The method of claim 1 wherein the error-related operation comprises a replication 
operation and a dependency operation. 

10 9. The method of claim 8 wherein the dependency operation is apphed to an output of the 

repUcation operation. 

10. The method of claim 1 wherein the computational task to be transformed is a request to 
compute {g^\-...g^") denoted by a vector Gj = {k^, . . • , where g denotes a generator and k^, . 

15 . , denote portions of a secret key associated with the cryptographic protocol. 

11. The method of claim 1 wherein the error-related operation includes one or more 
repUcation operations. 

20 12. The method of claim 1 wherein the error-related operation includes a repUcation 

operation in which a first vector = (k^, . . , , is transformed into a second vector 

25 13. The method of claim 1 wherein the error-related operation includes a dependency 

operation in which dependencies are introduced between two or more computational tasks. 
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14. The method of claim 1 wherein the error-related operation includes a dependency 
operation in which dependencies are introduced transforming a computational task involving a set 
of exponents k^,.,.,k^ into a task involving the exponents k[,,,.,k'^ , where 

^ ' \k, + a-k,_^ + p k[_imodq : l<i<n' 

15. The method of claim 1 wherein the blinding operation blinding for a vector (k^, ...,k„) 
is implemented by first choosing e random numbers Tj, . . . e {0, . . . , — }, and then, for each 

element kj with \<j <n,d elements are chosen and elements of a new vector are computed as 

e 

10 k] = k^-J]y^/, modq 

i=\ 

where y,^ E {0, 1} and J = ^ * 

16. The method of claim 1 wherein the permutation operation comprises applying a 
permutation 77 selected uniformly at random to a vector output of the blinding step to generate a new 

1 5 vector corresponding to the transformed computational task. 

17. The method of claim 1 wherein the results of the transformed computation are 
transformed by inversion of the permutation operation followed by inversion of the blinding 
operation, and the transformed results are verified based on information associated with the error- 

20 related operation. 
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18. An apparatus for performing a computational task associated with a cryptographic 
protocol in a distributed manner using a plurality of machines, the plurality of machines comprising 
an originator machine and at least one additional machine, the apparatus comprising: 

a processor associated with the originator machine and operative to transform a 
5 computational task involving a given input in the originator machine, the transforming of the 
computational task involving at least an error-related operation, a bhnding operation and a 
permutation operation, to send the transformed computational task to the at least one additional 
machine for execution, to receive one or more results of the transformed computational task, and to 
transform the one or more results of the transformed computational task in a manner which permits 
10 verification that the one or more results are appropriate results for the given input; and 

a memory coupled to the processor for at least temporarily storing at least a portion 
of the results of the transformed computational task. 

19. A computer-readable medium containing one or more programs for performing a 
1 5 computational task associated with a cryptographic protocol in a distributed manner using a plurality 

of machines, the pluraUty of machines comprising an originator machine and at least one additional 
machine, wherein the one or more programs when executed in a processor provide the steps of: 

transforming a computational task involving a given input in the originator machine, 
the transforming of the computational task involving at least an error-related operation, a blinding 
20 operation and a permutation operation; 

sending the transformed computational task to the at least one additional machine for 

execution; 

receiving one or more results of the transformed computational task in the originator 

machine; and 

25 transforming the one or more results of the transformed computational task in the 

originator machine in a manner which permits verification that the one or more results are 
appropriate results for the given input. 
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